PT-2021-16667 · Mediatek · Mediatek Rrc Protocol Stack

Published 2021-10-06 · Updated 2022-04-01 · CVE-2021-25477

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Mediatek RRC Protocol stack versions prior to SMR Oct-2021 Release 1

Description: The issue is related to improper error handling in the Mediatek RRC Protocol stack, which can cause a modem crash and allow for remote denial of service.

Recommendations: For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ASB-A-220262213

CVE-2021-25477

M-MOLY00684727

Affected Products

Mediatek Rrc Protocol Stack

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-25477 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25477 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-220262213 · Vendor Advisory
• https://t.me/cibsecurity/30093 · Telegram Post
• https://t.me/cvenotify/22005 · Telegram Post
• https://source.android.com/security/bulletin/2022-04-01 · Note